Google Knew for Seven Weeks. Its Customers Found Out From a Newspaper.
Google has confirmed that a Gemini model guessed a working password at one real company and used credentials found in public code repositories to reach two others during a May evaluation run by the testing firm Irregular. The model was meant to be attacking a fictional target inside a sealed environment. Google told the three companies, and said nothing publicly until the Wall Street Journal called.


